What format are the Encrygma threat feeds available in?

Encrygma publishes feeds in three formats: STIX 2.1 bundles for STIX/TAXII-compatible platforms, a flat JSON observation feed for programmatic ingestion, and a CSV indicator export for spreadsheets and analyst notebooks.

Where do the feed observations come from?

All observations are derived from published Encrygma defensive research — MITRE ATT&CK technique mappings, CVE references, and threat-actor profiles curated by Encrygma analysts from public and OSINT sources.

Are the feeds free to use?

Yes. The feeds are publicly downloadable and licensed for defensive security use. See the /legal page for full terms.

How often are the feeds updated?

Feeds are regenerated live from the latest published intelligence on each request, so every download reflects the current state of Encrygma's published research.

Machine-Readable Intelligence

Threat Feeds & IoC Downloads

Structured, machine-readable threat intelligence feeds derived from published Encrygma research. Download ATT&CK technique observations, CVE references, and threat-actor objects in STIX, JSON, or CSV — for SIEM enrichment, threat-intelligence platforms, and AI model ingestion.

Encrygma AI Cyber Weapons Advisory Services :We provide AI Cyber Warfare Technologies Reports, including full technical blueprints, tech source codes, entire know how. Consult with us. Click Here

STIX 2.1

STIX 2.1 Bundle

Machine-readable bundle of attack-patterns, vulnerabilities (CVEs), threat-actor objects, and report objects with relationships. Import into any STIX/TAXII-compatible threat intelligence platform (MISP, OpenCTI, ThreatConnect).

Download STIX 2.1

https://encrygma.com/functions/generateThreatFeeds?format=stix

JSON

JSON Observation Feed

Flat JSON array of ATT&CK technique observations and CVE references derived from published Encrygma research, with source attribution and publication dates. Ideal for programmatic ingestion and SIEM enrichment.

Download JSON

https://encrygma.com/functions/generateThreatFeeds?format=json

CSV

CSV Indicator Feed

Tabular observation export (observation_id, type, id, tactic, threat_level, geography, source_report, source_url). Drop into spreadsheets, threat intel platforms, or analyst notebooks.

Download CSV

https://encrygma.com/functions/generateThreatFeeds?format=csv

Live Feed Preview

Click Load Preview to fetch a live sample of the JSON observation feed.

How to Use

• STIX: Import the bundle into OpenCTI, MISP, or any STIX 2.1-compatible TIP.
• JSON: Fetch via GET /functions/generateThreatFeeds?format=json for automated ingestion.
• CSV: Open in Excel, Google Sheets, or load into a pandas DataFrame.
• All feeds are regenerated live from the latest published intelligence.

Attribution & License

• Every observation carries a source_report and source_url back to the originating Encrygma report.
• Feeds are licensed for defensive security use — see the Legal page.
• Encrygma is a defensive intelligence platform; feeds contain no exploit code or attack instructions.